問87
頻出度★★★
ISMS における情報セキュリティに関する次の記述中の a，b に入れる字句の適切な組合せはどれか。 情報セキュリティとは，情報の機密性，[ a ]及び可用性を維持することである。さらに，[ b ]，責任追跡性，否認防止，信頼性などの特性を維持することを含める場合もある。
令和2年度 ITパスポート試験 問87
テクノロジ系セキュリティ › 情報セキュリティ管理
This question's explanation and your answers so far.
解説
問 87
- ア
正解 JIS Q 27000, the standard underlying an ISMS (Information Security Management System), defines information security as “maintaining the confidentiality, integrity, and availability of information.” These three are the three core elements of information security (CIA), and blank a is filled by the remaining one, “integrity” (the property that information is accurate and has not been tampered with). The standard further lists “authenticity, accountability, non-repudiation, and reliability” as characteristics that may additionally be maintained, and blank b is filled by “authenticity” (the property of ensuring that a user or piece of information is genuine). Therefore combination ア, with a=integrity and b=authenticity, is correct.
Incorrectイ
a=integrity is correct, but b=maintainability is wrong. Maintainability (the ease of maintenance) is not an information-security characteristic but a concept belonging to system quality characteristics. The additional characteristics listed by the standard are authenticity, accountability, non-repudiation, and reliability, which do not include maintainability.
Incorrectウ
b=authenticity is correct, but a=preservation is wrong. The remaining one of the three core elements is “integrity,” not “preservation.” Preservation is not a formal term used in the JIS Q 27000 definition of information security; it is a distractor based on a confusingly similar word.
Incorrectエ
Both a=preservation and b=maintainability are wrong. The correct term for a is “integrity” and for b is “authenticity.” Neither blank matches the standard's definition, making this the most inappropriate combination.
ここがポイント
- The three core elements of information security (CIA): maintaining confidentiality, integrity, and availability is the definition of information security in JIS Q 27000.
- As characteristics that may additionally be maintained, the standard lists authenticity, accountability, non-repudiation, and reliability.
用語